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OS X SECRETS 





BY TED LANDAU 


Inside File Extensions 


FOR YEARS, MAC USERS HAVE TAKEN DOCUMENT NAMES 
for granted: When you double-click on an icon, the correct application 
typically opens—no matter what the document is called. But it’s a differ- 


ent story in Mac OS X. Now, the application that 
opens when you double-click can depend on a 
document’s extension—the suffix added to the file 
name (after a period). And having the wrong exten- 
sion can make your document behave in strange and 
unexpected ways. 


Extension Hide-and-Seek 

The first trick to understanding OS X’s extensions is 
finding the extensions. OS X’s simple word processor, 
TextEdit, is a model for 
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example, if you name a file 
“sample” and then check 
out the document's icon in 
the Finder, it will proba- 
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What's in a Name If 
a document's extension 
(in this case, .rtf) isn’t 
visible in the Finder, 
you'll find it by looking 
in the Info window. 


sure triangle next to the 

Name & Extension sec- 
tion. The text box that appears reveals the file’s true 
name: sample.rtf (see “What’s in a Name”). RTF is an 
abbreviation for rich text format, the default docu- 
ment type for TextEdit. The extension isn’t displayed 
in the Finder because the Info window’s Hide Exten- 
sion option is enabled. The extension will appear 
when you deselect this option. 

Why does Apple play this game of hide-and-seek? 
First, the company figured that most longtime Mac 
users would prefer not to see file extensions. Second, 
it’s harder to modify an extension if you can’t see it— 
and unintentional modification can get you into trou- 
ble, as we’ll discuss later. 


Sometimes, though, it’s useful to know what a file’s 
extension is. Together with a file’s icon it can help 
identify what type of file you have (a JPEG versus a 
TIFF graphic, for example). Seeing the extension is 
also helpful when you need to change it so that the 
file opens in a specific application. 

Thankfully, you don’t have to go to the Info win- 
dow every time you want to make an extension visi- 
ble. There are a couple of ways to do so when you 
save a file. 

In a Save dialog box, click on the disclosure trian- 
gle to the right of the file’s name; in many applica- 
tions, this reveals a Hide Extension check box. When 
you deselect this option, the extension will appear at 
the end of the file’s name. It will also appear in the 
Finder when you save the file. 

You can also type the extension yourself when you 
name the file—assuming you know what extension 
to add. OS X will then deactivate the Hide Exten- 
sion option. 

If you prefer to always have extensions visible in 
the Finder—perhaps you'll be editing file names and 
want to be certain what the true names are—open 
the Finder’s Preferences window, click on the 
Advanced button, and activate the Show All File 
Extensions option. 


Changing a Document’s Extension 

So why would you want to change a document’s exten- 
sion? To make the document open in a different appli- 
cation—that is, as long as the file doesn’t have a 
creator code. (For more on creator codes and how to 
change them in OS X, see “Where'd the Type and 
Creator Go?”) For example, suppose you have a plain 
text (.2v7) document that contains HTML code, and 
you want it to launch in Safari. Because Safari doesn’t 
support .tvt files, you’ll need to change the file’s exten- 
sion to .btml (or something similar, such as .shtm/). If 
the file’s extension is visible, you can easily change it 


If you're confused by an extension name, 
go to www.webopedia.com/quick_ref/ 
fileextensionsz.asp for a comprehensive list 
of extensions, from .au to .zip, as well as 
the applications they're associated with. 
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WHERE D THE TYPE AND CREATOR GO? 


Mac OS 9 links documents and applications with 
Type and Creator, a pair of four-character codes 
embedded in each file. The Type code identifies, 
for example, whether a graphic is in JPEG or GIF 


use these utilities to add Creator codes to docu- 
ments that have none. 

You may be asking yourself, “Why did Apple 
switch to these file-name extensions? Type and 
Creator codes work just fine!” Apple says the 
change was important to facilitate transferring 
files to PCs, which use extensions but can't use 
Type and Creator codes. Whether or not you 
agree with Apple's rationale, file-name exten- 
sions are here to stay, so it will pay to learn 


OS X gives the Creator code priority. That's why 
most documents created in OS 9—as well as 
many documents created by OS X applications 
observing the Type and Creator standard—are 
immune to changes in the file-name extension. 
If a file isn't responding to your extension 
change, it may include a stubborn Creator code. 
You can remove it with a utility such as Rainer 
Brockerhoff's XRay ($10; www.brockerhoff.net/ 
xray) or Gideon Softworks’s FileXaminer ($10; 


format. The Creator indicates the default applica- 
tion (say, Adobe Photoshop or Macromedia Fire- 
works) your Mac will use to open the document. 
Although OS X tends to eschew Type and 
Creator codes in favor of file extensions, it does 
still support these codes. In fact, if a file-name 


extension and a Creator code are both present, 


in the Finder by typing in the new extension in 
place of the old; doing so changes the file’s icon and 
its name. 

Beware: In some cases, changing an extension may 
prevent a file from opening at all. For example, if you 
change sample.rtf to sample.cwk, AppleWorks will 
launch when you double-click on the new file. 
Because the file isn’t meant to be an AppleWorks doc- 
ument, the program will claim that the file is dam- 
aged and will refuse to open it. Similarly, changing an 
image’s extension from .tif to .jpg doesn’t really 
change the file into a JPEG. 

In some cases, the operating system or applica- 
tion software will prevent you from making bad 
extension changes. For example, if you try to 
replace the .rtf extension in TextEdit’s Save dialog 
box with one TextEdit doesn’t use, such as .cwk, the 
program will override your extension and will force 
you to keep the .r¢f- 

However, whereas ‘TextEdit prohibits you from 
making these changes, the Finder lets you do what you 
want—for better or for worse. To be certain you’re 
making the change you want to make, rename exten- 
sions in the Name & Extension section of the file’s Info 
window rather than in a Finder window, and deselect 
the Hide Extension option. Otherwise, you may only 
mask the file’s true extension. 

When Things Get Tricky There are some extensions 
that you should generally avoid altering. If you paste 
a graphic into a TextEdit document, for example, 
TextEdit will change the document’s extension to 
.rtfd when you save the file. Avoid the temptation to 
change the extension name back to what it was previ- 
ously. An RTFD file is not a file at all. It’s an OS X 
package (also referred to as a bundle). 

Packages behave like files, but they are actually 
folders in disguise. You can view the contents of any 
package by control-clicking on its icon and choosing 
Show Package Contents from the contextual menu. 
In Panther, you can also access this command from 
the Action menu in the Finder’s Toolbar. If you use 
this command to peek inside an RTFD file, for 
example, you'll see an RTF document (which con- 
tains the file’s text) as well as an additional file for 
each pasted graphic. 


www.gideonsoftworks.com). Conversely, you can 





how they work. 


If you change the extension of an RTFD file to 
anything other than .r¢fd, or if you remove the exten- 
sion altogether, the package will reveal its true colors. 
Double-click on the file’s icon and it will open as a 
folder instead of as a TextEdit document. The icon 
may even change to a folder icon. You can use this 
trick to access an embedded graphic without opening 
the document. However, you won’t be able to use the 
RTFD file until you restore its proper extension. 


New Openings 

What if, despite all these extension manipulations, 
your document still doesn’t open in the desired appli- 
cation? OS X provides a backup plan. Open the file’s 
Info window and click on the disclosure triangle next 
to the Open With section. Here you'll see a pop-up 
menu showing the application that will open if you 
double-click the document icon. To select a different 
application, click on the default application’s name 
and choose another from the menu. (Select Other if 
the application you want isn’t listed.) 

‘To make the new application the default for all doc- 
uments of this type, be sure to select the Change All 
option at the bottom of the section. This will help 
you avoid making repeat trips to the Info window to 
have, for example, PDF documents open in Adobe 
Reader instead of in Preview. If you have multiple 
versions of the same application on your drive, you 
can also use Change All to select which version you 
want OS X to use by default. None of these changes 
affects your ability to open a document from an appli- 
cation’s Open command—or to open a document by 
dragging it onto the application’s Finder icon. The 
changes affect only what happens when you double- 
click on a document icon. 


A Happy Ending 

It’s true that the way files behave when you double- 
click on them can be more confusing in OS X than in 
OS 9; but with some knowledge of how extensions 
work, you can take control of how OS X makes these 
decisions. 


| Contributing Editor TED LANDAU explores file-name extensions and numerous other mysteries of OS X 


in his new book Ted Landau’s Mac OS X Help Desk (Peachpit Press, 2004). 
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OS x SEC RETS BY GREG KNAUSS 


Unleash Your Unix Power 


MAC OS XS GRAPHICAL USER INTERFACE (GUI) IS ELEGANT, 
graceful, and powerful enough to let most of us ignore what’s happening behind 
the scenes. However, if you never venture beneath the surface to OS X’s command 


line, you won’t know the half of what your Mac can do. 
With the right commands, you can streamline your 
work and manipulate your files in ways otherwise 
impossible in the OS X interface. This article will help 
the adventurous get started. 

All command-line work happens in Terminal, which 
is located in the Utilities folder in your Applications 
folder. Once you launch Terminal, you’re ready to 
begin. 


The Anatomy of a Command 

Unix commands can be broken down into four parts. 
The first is the command-line program, which is like 
any other Mac application, except that it uses text 
instead of graphics to communicate with the user. 

Next come options. The command-line equivalent 
of Preferences, options allow you to modify how a 
program functions. The general rule is that options 
are identified by either a 
single dash or a double 
dash followed by either a 
single character or a 
whole word. An addition- 
al parameter may follow 
the option. 

Third are arguments, 
or the input the program 
acts upon. A program’s 
arguments are usually 
file names, but they can 
be almost anything— 
including the output of 
other command-line 
programs. 

Finally, there’s output, 
the result of the pro- 
gram. Just like a regular program’s output, a com- 
mand-line program’s output can be either a file or a 
printed page; but it’s most often on-screen text. 

Now that you have the basics down, let’s see how 
these four parts work together. 

Getting to Know Is Hundreds of command-line 
programs are available in the standard installation of 
Mac OS X. These can range from the incredibly sim- 
ple (echo outputs whatever you type as its arguments) 
to the ridiculously obscure (yes repeatedly presses the 
Y key for you). 


One of the most common programs is the list (Is) 
command, so we’ll start there. Type Is into Terminal 
and press return. Congratulations, you have just run 
your first command. 

The list command displays the contents of the cur- 
rent folder (the “directory” in Unix lingo). You 
should see the names of all the folders and files in 
your Home folder, including the Desktop, Docu- 
ments, Sites, and so on. That’s easy enough, but 
there’s more: Io modify the default behavior of the 
command, you can join it with options. 

Options You can combine Is with several options 
that will change the way it works. For example, |s -| 
will display a long list including such details as file 
sizes and modification times. Is -a will show all files, 
including those with names beginning with a dot (.), 
which are normally hidden. (Names of Unix configu- 
ration files are often preceded with a dot so that they 
won’t clutter normal listings.) You can combine 
options, too: |s -| -a will give you an expanded long list 
of folder contents with all the files displayed. 

How do you find out which options a com- 
mand has? Type man (manual) followed by the 
name of any command-line program to see all the 
details about (and examples of) its options and 
functionality. 

Arguments Like many other commands, |s also takes 
arguments to define what input the program responds 
to. For instance, Is /Users will show you the Home fold- 
ers of all the users on your machine, along with the 
universal Shared folder. The command Is /Users/jdoe 
/Users/rroe will show you the contents of both the jdoe 
and rroe user folders. 

You can even use wildcards to specify a range of 
names more easily: an asterisk (*) will act as a stand- 
in for any group of characters, and a question mark 
(?) will substitute for a single character. For example, 
Is ~/*.doc will show you all the word processor docu- 
ments in your Home folder (~). This is handy when 
you need to narrow the arguments to a manageable 
range. 


Controlled Experiments 
Now that you’re better acquainted with Is, here are a 
few other command-line essentials. 

Changing Directories with cd Unlike the Finder, 
which allows you to have any number of folders open 


MORE UNIX TRICKS 


You don't need a Unix tome to get started with the command line. You can learn an enor- 
mous amount just by reading and experimenting on your own. Many commands come 
with detailed documentation—you just have to know where to look. In Terminal, type 


at once, the command line limits you to a single place 
at any one time—this is your working directory. The 
cd (change directory) command allows you to define 
a new working directory. 


man (manual) followed by one of these commands to see details and examples. 


‘Type cd Sites to move into your Sites folder and 
make it the working directory. Type cd .. to move one 
step back toward the root of your hard disk, or cd / to 
move all the way there. The command cd ~ will return 
you to your Home folder. If you get confused about 
which directory you’re in, pwd (print working direc- 
tory) will always show you where in the folder hierar- 
chy you are. 

Having Fun with Files You can do more with com- 
mand lines than just list files. The ditto command, for 
example, makes copies. 

To use ditto, follow it with two or more file names 
(the first file name should be the source, the second 
should be the destination, and an optional third file 
name should specify the folder into which you’re 
copying all of the previous files). 

Be sure to include the -rsrcFork option to preserve 
the HFS+ resource fork on the copied files. And feel 
free to use wildcards when you're specifying the 
source files and folders. For example, to copy all the 
word-processing documents in your Home folder to 
the temporary directory, type 

ditto -rsrcFork ~/*.doc /private/tmp 

To view the copies, select Go: Go To Folder in the 
Finder and enter /private/tmp. You can also use cd 
/private/tmp and Is from the command line. 

By using wildcards and commands such as ditto, 
you'll start to see the power the command line gives 
you—with a single command you can find and copy 
hundreds of files. 


The Impossible Made Possible 

But that’s just the beginning. By stringing Unix com- 
mands together with redirection—using the output of 
one program as the input for another—you can 
accomplish things that are otherwise impossible. 

There are three ways to redirect the output of a com- 
mand so that another command can use it as input. The 
vertical bar—or pipe (|)—sends output directly to the 
following command-line program for use as input. For 
example, Is -| | more uses the more command to pause 
after each screen of data. 

If you surround a command with backward apos- 
trophes, or backticks (~), the command will include its 
output in the argument list of another command. 
One example is cd ‘cat gohere.txt’. The cat (concate- 
nate) command displays files on screen. When com- 
bined with backticks and cd, it can change the folder 
listed in a file into your working directory. 

Finally, the greater-than sign (>) will dump the 
program’s output to a file instead of to the screen. For 
example, Is -| ~ > ~/myfiles.txt creates a file called 
myfiles.txt in your Home folder. This file contains 
the long list of Home’s contents. 


File viewing: tail, head, more, less, cat 

File manipulation: cut, sort, unig, grep, we 

File creation: touch, mkdir 

Ownership and permissions: id, chmod, chown, chgrp 
Process manipulation: ps, top 

System information: df, hostname, domainname, machine, who 





Bring It All Together 

The true power of the command line becomes appar- 
ent when you bring commands, options, arguments, 
and redirection together. Here is a single line of com- 
mands that saves compressed backup copies of all 
Word documents in your Home directory, complete 
with a dated file name: 

find ~ -name '*.doc' | xargs gnutar -c -z -f ~/‘date 
+%Y%m %d.tar.gz 

As complicated as this looks, it breaks down very 
simply. The find command lists files based on several 
criteria: name, date, owner, and many more. find ~ 
-name '*.doc' lists every file in your Home folder and 
its subfolders that ends with .doc. 

The contents of that list are passed to the gnutar 
command, which is basically a simplified Unix ver- 
sion of Stufflt—the xargs command acts as a bridge 
between the output of find and the input of gnutar. 
You can control the gnutar program with the follow- 
ing options: -c creates a new archive, -z tells the pro- 
gram to compress the archive with gzip (the standard 
Unix compression program), and -f is followed by the 
name of your newly created archive. 

When executed, the command creates and shrinks 
the archive and writes the result to a file containing 
the output of the date command: your Home folder 
(~); the year, month, and day (%Y%m%d); and the 
typical Unix extension for a file that has passed 
through gnutar and gzip (tar.gz). 

Although files are stored in a single archive, they 
are retrieved individually. To recover a file, reverse 
the process using the -x (extract) option: 

tar -x -z -f YYYYMMDD.tar.gz '*filename*' 

Replace YYYYMMDD with the archive date and 
filename with at least part of the file name to be 
restored. Just remove ‘*filename*' from the command 
to restore the entire archive. 


Taking Command 

This article only scratches the surface of what you can 
do with OS X’s command line. Once you get used to 
a few simple rules, the full power of OS X will be at 
your command. 


| GREG KNAUSS has been programming computers since he was 13 years old. He didn’t date much in 


high school. 
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Crowd Control 


| USERS | BY DAN FRAKES 


UNLIKE EARLIER VERSIONS OF THE MAC OS, OS X IS 
designed to be a multiple-user environment. Even if you’re the only person who 
uses your OS X machine, you can benefit from the extra security a user account 


provides. More significantly, if you’re not the only 
user of your computer, having more than one user 
account gives you flexibility and security that wasn’t 
possible before. 

Although setting up multiple user accounts isn’t 
difficult, managing who has access to what can be 
tricky if you don’t understand what’s happening 
behind the scenes. Here’s what you need to know to 
create and manage multiple accounts, fix common 
permission problems, and even group different users 
together for more advanced control. 


May | Have Your Permission? 
The first step to getting the hang of user accounts is 
understanding permissions. OS X keeps track of who can 
open and who can edit every document or application 
on your Mac (or who has “read” and who has “write” 
privileges, respectively). You’re probably familiar with 
this concept if you’ve used OS 9’s File Sharing or Mul- 
tiple Users features. OS X, however, employs Unix- 
style permissions. So while OS 9's File Sharing 
privileges apply only to remote users, OS X’s permis- 
sions apply to everyone—both local and remote. 
In Unix, viewing and setting file permissions is an 
ugly affair. You can use OS X’s 


Safety in Numbers 

One way to take advantage 

of multiple user accounts— 

even if you're the only per- 

son using your Mac—is to 
T | P use them as troubleshooting 

tools. For example, | recom- 
mend creating an extra user account that you 
don't normally use. If you begin having prob- 
lems (such as crashing applications or a frozen 
OS), you can log out of your personal account 
and log in to this troubleshooting account. If 
the problems disappear, the cause is likely 
something unique to your usual personal 
account; if the problem persists, chances are it's 
a problem with the OS itself. Similarly, if you'd 
like to try out some new or beta software with- 
out worrying about messing up your personal 
account, you can create a testing account. If the 
software causes any problems, generally, only 
the testing account will be affected. 


Terminal application to get a 
taste of what this command-line 
permissions work is like, but 
that’s mostly unnecessary. In 
OS X, you can view a file’s per- 
missions simply by selecting a 
file in the Finder and choosing 
Get Info from the File menu. 
Click on the disclosure triangle 
next to the Ownership & Per- 
missions heading and then click 
on the triangle next to Details. 
The resulting display will list 
the file’s owner (the user with 
ownership rights to the file) and 
its group (the users who have 
some kind of access to the file), 
as well as the privileges given to 
the owner, the group, and those 
users who do not have any 
rights to access the file (see 
“Feeling Privileged”). 


The owner of the file can change these privileges 
by using the pull-down Access menus. However, if 
your account has administrative access, you can 
change privileges for the files you don’t own by click- 
ing on the small padlock icon to the right of the 
Owner and Group menus, and then changing the 
Owner of the file to yourself. Choose the desired set- 
tings from the Access menus. When you're done, 
change the Owner back to its original value. After 
making changes to one of these settings, you'll have 
to provide your user name and password to authenti- 
cate the change. 

If you prefer a more straightforward approach 
to changing these settings, a number of third-party 
utilities provide a simplified check-box interface. 
Two of the best are Rainer Brockerhoff’s XRay 
($10; $6666; www.brockerhoff.net/xray) and Gideon 
Softworks’s FileXaminer ($10; $6663; www. 
gideonsoftworks.com). 

‘Taken as a whole, these permissions provide com- 
plete control over who can read or edit every file on 
your hard drive, no matter where it’s located. Now 
that you understand permissions, it’s time to talk 
about why they exist: user accounts. 


Getting Used to Users 

When you first install OS X, the system prompts you 
to create an account and a password. This is your user 
account. By default, this initial user account is assigned 
administrative access and is set to log in automatical- 
ly. After this initial setup, you won’t need to enter any 
information at startup (although you can change this 
option if you wish). 

You could leave your Mac set up with only the sin- 
gle user account and let other users share the account; 
but if you do this, all of your files will be accessible to 
anyone who uses the computer. In addition, you'll 
miss out on the security, flexibility, and power that 
multiple accounts bring to your desktop. Let’s take a 
brief look at these advantages. 

By default, each user account under Mac OS X has 
its own Home folder (located inside the Users folder 
at the root level of the boot volume). Documents and 
other files—applications, MP3s, preferences, and so 
forth—stored in your user folder are for your eyes 
only. Unless you explicitly change those files’ permis- 
sions, no one but you can read or edit them. In fact, 


the Desktop in OS X is stored as a Desktop folder 
within your user folder—anything you save or move 
to the Desktop will also be inaccessible to other users. 

In addition to these security advantages, user 
accounts provide an impressive amount of flexibility 
in allowing users to customize the OS. Each user’s 
individual settings—login picture, desktop back- 
ground, Microsoft Word preferences, e-mail account 
information, and so on—are stored in his or her user 
folder and are activated at login. For a family with 
multiple users, this can be a godsend—no more reor- 
ganizing your desktop icons because Sally’s games 
always change the screen resolution, and no more 
changing the desktop because you don’t like looking 
at Susie’s Justin Timberlake background while you 
surf the Web. 


Setting Up New Users 

Creating new users in OS X is easy, but you need 
administrative access to do it. (As previously men- 
tioned, the first person who sets up an account under 
OS X is automatically an administrator.) To create a 
new user, an administrator must go to the Accounts 
pane of System Preferences and click on the plus but- 
ton (+) in the lower left corner. Fill in the new user’s 
full name, short name (which becomes the user’s 
Home folder name), and password (which the user can 
change later). You can give the new user administrative 
access by clicking on the Security button and then acti- 
vating the Allow User To Administer This Computer 
option. However, you should use this option sparing- 
ly—it’s akin to giving someone a key to your house. 


Sharing the Wealth 

Although user accounts are essential for keeping 
other people from accessing your files, sometimes 
you want to provide access to others. There are a few 
ways to do this in OS X. 

Apple has provided a common folder for sharing 
files. It’s called, appropriately enough, the Shared 
folder. This folder is accessed from the Users direc- 
tory, but unlike standard user folders, what’s in 
Shared can be seen by everyone. Note that files creat- 
ed in the Shared folder are automatically set to allow 
read privileges to everyone. However, files created 
elsewhere and then moved to the Shared folder retain 
their original permissions—so if you create a docu- 
ment in your Home folder and want other users to be 
able to open it, you'll need to change its permissions 
after you move it to the Shared folder. 

The second way to share files with others is by 
using your Public folder. Located inside your Home 
folder (Users: username: Public), this directory is the 
only personal folder that can be viewed by other 
users. Inside the Public folder is a Drop Box folder, 
which provides you even more security. If another 
user places a document inside your Drop Box, only 
you will be able to see it. Likewise, you can’t read or 
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all folders remotely.) 

Regardless of where a file is cre- 
ated, by default, only its owner can 
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edit it. If you want to allow others 
to edit it, you must give them write 
privileges. The easiest way to do this is to set the file’s 
permissions (under the Other category) to both read 
and write, and then drop a copy of the document in 
each user’s Drop Box. That is, unless you decide to 
take advantage of Groups. 


| >» Comments: 


How to Be Part of the Group 

In addition to user permissions, OS X also supports 
group permissions—a way to provide a selected group 
of users with access to specific folders or files, includ- 
ing applications. Unfortunately, setting up groups is 
not as easy with OS X as creating user accounts and 
assigning user permissions are. 

What Are Groups? Groups are defined sets of user 
accounts. Using group permissions, you can provide 
a selected subset of users access to files or folders (and 
applications) without opening up access to everyone. 

Users in the group share the group’s privileges; 
users who aren’t in the group will only have the priv- 
ileges given to everyone (which may be no privileges 
at all). For example, if you want to prevent your kids 
from reading a document or using a particular appli- 
cation on your family computer, you can create a 
group called Parents and set the permissions for that 
document or application appropriately: Owner, Read 
& Write; Parents, Read & Write; Others, None. 
(Note: These group permissions are primarily useful 
for files in publicly accessible folders; anything inside 
your personal user folder will still be inaccessible to 
others.) 

Perhaps you have a spreadsheet at work that you 
want only the finance office to be able to view and 


“More Info: = ; ; 
For more on Unix-style users and security, check out 
http://developer.apple.com/internet/macosx/securityintro.html 


Feeling Privileged 
This document can be 
read and edited by the 
owner and read by 
people in the group; 
but it's inaccessible to 
anyone else. 


OS X SECRETS USERS 


Group Think NetInfo 
Manager allows you to 
create and modify 


groups. 


TIP 


(In)Secure Storage 

As a general rule files take 
on the permissions of the 
folder in which they are ini- 
tially created. Where this can 
become a security issue is 
with multiple volumes: The 
default permissions for nonboot volumes (a 
second partition or hard drive, a removable vol- 
ume such as a FireWire drive, or a Zip disk) 
give read access to everyone. Saving docu- 
ments to a nonboot volume is just like saving 
to the Shared folder. If this is a concern, you 
can change the permissions for the entire vol- 
ume, for individual folders on the volume, or 
just for individual files. You can also create files 
inside your Home folder and then copy them to 
the nonboot volume—the files will retain their 
original permissions. 
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edit. You could create a Finance group, place the file 
in a public location on the hard drive, and give only 
the Finance group read and write access. In fact, 
using groups and group permissions is the only way 
to restrict file access to a user subset. 

Setting Up Groups Each user can belong to any 
number of groups. The tricky part is setting up the 
groups—although OS X supports groups and group 
permissions, it doesn’t provide an easy way to man- 
age them. 

Use the NetInfo Manager utility (located in Appli- 
cations: Utilities) to create a group in OS X. A warn- 
ing: NetInfo is an extremely useful, but very 
powerful, utility. If you do something wrong, you 
could severely screw up your computer. Because the 
NetInfo database manages many network-related and 
user-related settings, changing or deleting the wrong 
setting could affect network functions or even pre- 
vent you from logging in correctly. I strongly recom- 
mend that you create a backup of your NetInfo 
settings before making any changes. Unfortunately, 
doing so isn’t simple; we’ve 
placed instructions online at 
www.macworld.com/2003/12/ 
special/netinfobackup. 

After you launch NetInfo 
Manager, you'll need to unlock 
administrative access. Click on 
the padlock icon at the bottom 
of the NetInfo window and 
enter your account password. 
Assuming your user account 
has administrator rights, this 
will unlock NetInfo and allow 
you to make changes. 

In the Directory Browser 
section of the NetInfo Manag- 
er window, click on Groups in 
the middle pane. Although you 
can create a group from scratch, 
copying and editing another 
group is much easier. Select 


Guest in the column on the right, and then click on 
the Duplicate button. This will give you a new group 
subdirectory called Guest Copy. Select this new sub- 
directory to edit it (see “Group Think”). 

In the Property/Value pane at the bottom of the 
window, double-click on the Guest Copy value and 
change it to the name of your new group. Do the 
same with the Gid (group id) value—a unique num- 
ber that NetInfo uses to track the group. You can use 
almost any number you like as your gid, as long as it 
isn’t already in use by another group. Three-digit 
numbers between 100 and 499 are generally safe, 
because the groups that are already set up in OS X all 
use a gid under 100 or over 499. 

Finally, you’ll need to add users to the group 
you’ve just created. Click on the Users property and 
choose Insert Value from the Directory menu. Type 
in the first user’s short user name. Keep adding val- 
ues using the Insert Value command until you’ve 
added everyone you want as a member of that group. 

If you need to create another group, repeat this 
procedure. When you're finished, choose Save 
Changes from the Domain menu. Now you have 
your own custom groups that you can use to assign 
group privileges. 


Assigning Group Permissions 

Now that you’ve defined one or more groups, you 
can assign a group and group permissions to each file. 
Simply select a file in the Finder and choose Get Info 
from the File menu. Click on the disclosure triangle 
next to Ownership & Permissions, and then click on 
the disclosure triangle next to Details. Assuming 
yow’re the owner of the file, you can use the Group 
pop-up menu to assign a group to the file. Then use 
the related Access pop-up menu to define the group’s 
access privileges. If you’re not the owner of the file, 
click on the padlock icon and change the Owner set- 
ting to your own account. You can then change the 
Group and Group Access settings as described above. 
(Be sure to change the Owner setting back to its orig- 
inal value afterward.) 

Unfortunately, there’s no way to assign privileges 
to multiple groups for any one file; if you need to give 
two user groups access to one file but you don’t want 
to open access to everyone, you'll need to create a 
new group that includes all of the users from the two 
groups. 


User Power 

The ability to use multiple accounts is a powerful tool 
for file and folder security, as well as for troubleshoot- 
ing, flexibility, and convenience. Now that you under- 
stand how to set up and manage user accounts and 
groups, you’re ready to become the true administrator 
of your Mac. 


| DAN FRAKES is a Macworld columnist, author of Mac OS X Power Tools 
(Sybex, 2003), and an editor at MacFixlt.com. 


HAN DS ON BY DAN FRAKES 





Easy Mac Maintenance 


JUST LIKE YOUR CAR, YOUR MAC NEEDS ROUTINE MAINTE- 
nance in order to run smoothly. Unlike your car, your Mac can perform some 
of this maintenance on its own. Iwo important tasks to perform regularly 


are Disk Utility’s Repair Permissions and OS X’s 
Unix maintenance scripts. 

Repair Permissions ensures that system-level files 
have the correct privileges set; this is important 
because incorrect permissions can prevent applica- 
tions from launching, cause problems with printing, 
and even affect startup. OS X’s Unix maintenance 
scripts perform tasks that free up disk space and 
keep the OS tidy by updating and backing up data- 
bases, cleaning out temporary files, and cleaning up 
system logs. 


SCHEDULE REPAIR PERMISSIONS 


You should run Repair Permissions and the 
maintenance scripts when you boot your Mac into 
OS X. However, instead of having to remember to 
do these tasks yourself, you can tell your Mac to do 
them for you, using the built-in Unix utility cron 
and the CronniX utility (donations accepted; www 
-koch-schmidt.de/cronnix/). 

















DAN FRAKES is Macworld’s Mac Gems columnist. He is also an editor 
at MacFixlt.com and the author of Mac OS X Power Tools (Sybex, 2003); 
he can be tracked down at www.danfrakes.com. 





Meet Cron 

To automate an action with cron, you need to open 

a crontab (a cron table, or schedule) and then create a 
new entry—much as you’d create a repeating calendar 
appointment—that tells cron what to do and when. 


CronniX gives you an easy-to-use interface for working with 
crontabs. Launch CronniX and then choose File: Open System 
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Crontab. (Because these are system-level tasks, you're going 
to edit the system-level crontab; however, users also have 
individual crontabs.) 

You'll notice that the default crontab @ already has three 
entries; I'll talk about them later. Right now, you want to 
create a new entry, so click on the New button. The resulting 
schedule window @ lets you create a schedule for the desired 
action and then designate that action. 

| run Repair Permissions once a week, Friday mornings at 
10:15 a.m. (Whatever day and time you choose, make sure it’s 
a time when your Mac will be on and awake.) Using my setup 
as an example, enter 15 in the Minute field and 10 in the Hour 
field (cron uses 24-hour time, so 3 p.m. would be 15). These 
two fields tell cron to execute this action at 10:15 a.m. The 
Month and Day Of Month options are unimportant, so put a 
checkmark in those options’ boxes, or type an asterisk (*) in 
the value field—this tells cron to execute the event for any 
value of these fields. Finally, select the Fr (for Friday) option. 
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diskutil repairPermissions / >> /Users/frakes/ 
Desktop/permissionrepairs.txt 
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Tell Cron What to Do 

Next you need to tell cron what you want it to do at 
the specified time. Although you can run Repair Permis- 
sions from Disk Utility, you can also run it from Termi- 
nal via a Unix command; this is the command we'll tell 
cron to run. 


In the Schedule window's Command field @, first erase 
the example contents, and then type the following line: 
diskutil repairPermissions / 


The slash (/) indicates that you want to run Repair Per- 
missions on the startup volume. This command doesn’t 
give you any feedback; when you run Repair Permissions 
from Disk Utility, you get a report of the repairs it makes. 
| like to see this report, so I've used the following command 
instead (it should all be on one line, and case is important): 
diskutil repairPermissions / >> /Users/user name/Desktop/ 
permissionrepairs.txt 

(Replace user name with your user name.) Now your Mac 
will save a text report of repairs on the Desktop. 

Make sure the Prepend "/usr/bin/open" option ® is not 
selected, and then click on the New button to create the new 
event. Your new scheduled event will appear in the crontab. 
To test it, select it and then choose Task: Run Now. If all goes 
well (and if you've elected to save a report), the report 
should show up on your desktop after the utility has repaired 
permissions (this takes a few minutes). 

Before exiting CronniX, click on the Save button to save 
the changes you made to the crontab. CronniX will ask for 
your administrator user name and password to verify that 
you have permission to make system-level changes. Your new 
crontab entry takes effect immediately. Repair Permissions 
will run in the background at the specified time, without your 
having to lift a finger. 


SCHEDULE THE SCRIPTS 





Edit Daily Schedules 

OS X comes with three Unix maintenance scripts—daily, 
weekly, and monthly—which you see in the default sys- 
tem crontab. These scripts are already scheduled to run 
on a daily, weekly, and monthly schedule, respectively. 
However, because of a long Unix history we won't get 
into, the default times (the daily script runs at 3:15 a.m.; 
the weekly, at 4:15 a.m. on Saturday; and the monthly, on 
the first day of each month at 5:30 a.m.) mean that the 
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but it's more convenient to 
adjust the schedules so the scripts run when your Mac is likely 
to be awake. You'll use CronniX again, but this time, you'll edit 
the existing entries for the daily, weekly, and monthly scripts. 


continues 


EVER-VIGILANT CRON 


If you don’t have a Unix background, the cron utility is most likely for- 
eign to you. However, it’s one of the simplest and most useful Unix utili- 
ties you'll find in OS X. Cron runs in the background whenever your Mac 
is on. Every minute, it checks schedules called crontabs to see whether 
any command or script is supposed to run. If so, it runs them. If not, it 
takes a nap for 60 seconds, then checks again, and so on. 
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Anything you can do via a Terminal command, Unix shell script, or 
Mac OS AppleScript, you can run via cron at a specific day, date, and 
time. (The step-by-step section of this column provides you with a couple 
of good examples; for others, see “Put AppleScripts on a Schedule”.) You 
can even perform simple actions such as launching an application or 
opening a document (using the Terminal command open). 

Crontabs—the schedules that tell cron what should run and 
when—are located in the invisible /etc/crontab directory, for the sys- 
tem crontab, and /var/cron/tabs, for user-specific crontabs. (Although 
we're editing the system-level crontab in this article because we're 


performing system-level tasks, you should generally edit only your own 
user-level crontab.) The crontab format is a bit messy. Each event con- 
sists of a single line with values for the minute, hour, day of month, 
month, day of week, user name, and command. For example, the 
default crontab entry that runs OS X's weekly maintenance script is 


15 4 * * 6 root periodic weekly 

This entry tells cron that at 4:15 a.m. every Saturday (the sixth day of 
the week—the week starts on Monday), regardless of the month or the 
day of the month, the root user should run the periodic weekly com- 
mand. At 4:15 a.m. Saturday morning, cron finds a match for that entry 
and then runs the command. User-specific crontabs omit the user name 
variable, since all events in a user's crontab are executed as that user. 

You can view the system-level crontab by typing cat /etc/crontab in 
Terminal; likewise, you can edit crontabs in Terminal with the crontab 
command. However, viewing and working with crontabs in Terminal gets 
pretty messy, and a utility such as CronniX makes the process easier. 
Cronnix lets you access your own user-level crontab or, assuming your 
account has administrative access, the system-level (root) crontab. Entries 
for the chosen crontab are displayed in a format similar to Terminal’s, but 
with labeled columns that you can rearrange if you find them easier to 
read in a different order. You can also create a new entry (via the New 
button), delete an entry (by selecting it and clicking on Delete), enable or 
disable any entry, or click on the Edit button to edit the selected entry. 
When you're done, click on the Save button to save your changes, which 
take effect immediately. CronniX also lets you run a particular entry on 
cue (via the Run Now button). To view a different crontab in Cronnix, 
choose Open For User or Open System Crontab from the File menu. 

To learn more about cron, read the cron manual (type man cron 
in Terminal) or visit the CronniX Web site at www.koch-schmidt.de/ 
cronnix/docs/index.html. 








SECRETS HANDS ON 


In CronniX, open the system-level crontab. In the Com- 
mand column, you'll see the three cron events that run 
these scripts. 

Select the daily (here, periodic daily) entry and click on the 
Edit button. In the schedule window that appears @, change 
the Minute and Hour fields from 15 and 3, respectively, to a 
time when your Mac is generally on and awake. | changed 
mine to 12 p.m., when I’m often at lunch, by entering 00 in the 
Minute field and 12 in the Hour field. (Leave the other fields 
alone, since you still want the script to run every day.) Click on 
Apply to save your changes. 


Edit Weekly Schedules 
Now you'll alter the weekly day and time. 


Select the entry for the weekly script and click on Edit. If 
you don’t typically use your Mac on weekends, deselect 
the Sa (for Saturday) option and select one of the week- 
day options. Then edit the Hour and Minute fields to reflect 
a time when your Mac will be on and awake. (Avoid choos- 
ing the same time you used for the daily script.) Click 

on Apply. 


Edit Monthly Schedules 
Making your final change to the monthly schedule is 
a bit trickier. 


Since the monthly script is set to run on the same date each 
month, if the chosen date happens to fall on a weekend and 
your computer isn’t running on weekends, the script won't 
run. For this reason, you should create two crontab entries for 
the monthly script. 

Select the entry for the monthly script and click on Edit. 
| recommend keeping the Day Of Month field set to 1 (which 
means the script will run on the first day of every month). 
Enter appropriate Hour and Minute values, just as you did for 
the daily and weekly scripts. (I use 12:45 p.m.) Click on Apply 
to save changes. 

Next, select the entry you just edited in CronniX and 
choose Edit: Duplicate Task. Select the duplicate entry, click 
on Edit, and then change the Day Of Month field to a differ- 
ent day. | recommend 5—since it's impossible for both the 
first and fifth days of any month to fall on a weekend, this 
ensures that your monthly maintenance script will run the 
first week of every month. (In some months, both of these 


dates will fall on weekdays, meaning the script will run twice. 


Don't worry—this does no harm.) Click on Apply. 


Don't Forget to Save 
You're almost ready to sit back and let the scripts do 
your maintenance work. 


Click on the Save button and then provide your admin user 
name and password. Your edits will take effect immediately 
and your maintenance scripts will run during normal working 
hours. If you've been using Mac OS X for a while and you've 


PU AME SC ltelis 
ON A SCHEDULE 


After reading the main article, you should know how to use cron to run 
Unix scripts and commands. It's just as easy to launch OS X applications 
and AppleScripts. 

Launch CronniX and open your user-level crontab by choosing File: 
Open For User and then typing your user name. 

Create a new event by clicking on the New button. Schedule the 
event as you did in the main article—choose the days, dates, and time 
you want the application or AppleScript to launch. However, in the Com- 
mand area of the schedule window, delete the example text and select 
the Prepend "/usr/bin/open" option @. Click on the Browse button ©. 
Using the file dialog box, navigate to the application or AppleScript you 
want to run at the designated time(s). In the example shown here, I've 
chosen an AppleScript | wrote that launches iTunes and then tells it to 
begin playing music. I've scheduled this AppleScript to run just before 
noon on weekdays—perfect for reminding me that it’s time to go to 
lunch. Click on the New button to create your new crontab entry. Then 
click on Save to save 
your edited crontab. 

Because this is your 
user-level crontab, it will Mieure 
execute some events, = a 
particularly those that a 
work with applications, Day of week 
only when you're logged 
in to your account. This 
is convenient for me, as 
| don’t want my iTunes 
alarm event to run when 
someone else is using 
my Mac! 
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never run these scripts, you could gain a significant amount 
of hard-drive space the first time they run because of their 
cleaning actions. 


More Maintenance 

Running Repair Permissions and the maintenance 
scripts regularly will go a long way toward maintain- 
ing smooth operations on your Mac, but they don’t 
fix everything. 


You should also run Disk Utility's Repair Disk once a month 
or so, on both your startup drive and any additional vol- 
umes. Repair Disk checks your hard drive for damage and 
directory problems; such damage, if it's serious enough, 
can prevent your Mac from even booting. It’s also a good 
idea to occasionally run a more advanced disk-repair util- 
ity such as Alsoft's $80 DiskWarrior (800/257-6381, www 
.alsoft.com) to ensure that your disk’s directory is in tip- 
top shape. 

Keeping your Mac running smoothly requires some work, 
but automating some of the tasks as described here, and 
maintaining a regular schedule of disk care, should grant you 
a Stabler and more trouble-free experience in the long run. 
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Where's the Server? 
OS X 10.3 moves serv- 
er browsing from the 
Connect To Server dia- 
log to the Network 
icon. Windows servers 
on your local subnet 
will appear here along 
with Mac servers. 
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Make Peace with PCs 


BEING A MAC USER MEANS RUNNING INTO WINDOWS—YOU 
know, the operating system the other 95 percent use. Since you can’t beat ’em, 
you might as well join ’em—but you don’t have to give up your Mac. 


Peaceful coexistence with Windows PCs is possi- 
ble, as long as you arm yourself with some knowl- 
edge and the right tools. 


Sharing Files by E-mail 

E-mail is a huge time-saver. In mere moments, you 
can send a photo or a spreadsheet to someone on the 
other side of the world, who can then edit it and send 
it back just as quickly. E-mail is also a great way to 
extend your workgroup beyond the walls of your 
office. Most of the time, Mac and Windows users 
don’t even know what computer the other person is 
using—until someone attaches a document. 

One problem you may encounter when e-mailing 
files to or receiving them from Windows users is a 
file that won’t open or that consists of garbled text. 
People often assume that something was messed up 
in transmission. In fact, the problem is usually 
caused by an encoding or compression standard that 
the receiver’s e-mail software doesn’t understand or 
that requires an extra utility to decode. 

All attached files require encoding. This process 
turns the bits in your file into a stream of text sent 
with your e-mail message. You can also use compres- 
sion to make a file smaller, but this is less necessary 
with today’s high-speed Internet connections. 

Sending Encoded E-mail When you attach a file to a 
message, your e-mail software uses one of several stan- 
dards to encode the file. AppleDouble and BinHex are 
the best choices if you’re sending the attachment to a 
Mac user; they preserve the Mac icon as well as file 
type and creator information. When e-mailing a file to 
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a Windows user, use AppleDouble or MIME/Base64. 
(Many—but not all—Windows e-mail programs can 
also handle UUencode.) Don’t use AppleSingle or 
BinHex to send a file to Windows users—most PC 
e-mail programs can’t decode these formats. 

Before Panther, Apple Mail didn’t offer any way to 
change message encoding. Because Mail uses the 
AppleDouble format, this wasn’t a problem in most sit- 
uations. However, if you needed to send an attachment 
to a Windows user who had trouble with AppleDou- 
ble, your only option was to change e-mail clients. In 
Panther, Mail attempts to solve this problem by offer- 
ing a new Send Windows Friendly Attachments 
option. However, activating this option won’t let you 
choose which encoding standard to use. 

Fortunately, you can select encoding in most other 
e-mail applications, including Qualcomm’s Eudora 
(Lite and sponsored versions are free; other versions 
are $50; www.eudora.com), Microsoft Entourage X 
($99 alone or $399 with Office X; www.microsoft 
.com/mac), Bare Bones Software’s Mailsmith ($99; 
www.barebones.com), and CE Software’s QuickMail 
Pro ($35; www.cesoft.com). 

Changing the encoding setting is usually a simple 
affair. In Entourage, for example, you set encoding in 
the message window. Under the subject line, click on 
the disclosure triangle to open the Attachments field. 
Click on the Encoding bar to reveal a window that 
displays your options (see “Easy Encoding”). 

Sending Compressed Files Some e-mail applications 
compress files by default. Generally, Mac e-mail pro- 
grams use Aladdin’s StuffIt format (which adds the 
file-name extension .sit), while Windows uses the ZIP 
format (which adds the extension .zip). There’s a free 
version of Stufflt Expander for Windows (www 
.stuffit.com/expander/index.html), but not many 
Windows users have it. And because not all ZIP util- 
ities use the same format, the safest choice is to avoid 
compressing file attachments whenever you can. 

If you must compress, you'll be happy to know that 
Panther makes the process easier than ever. Rather 
than downloading a special utility such as Aladdin’s 
StuffIt, you can now use the ZIP-compression tool 
built right into the operating system. Simply control- 
click on any file or folder in the Finder and choose 
Create Archive Of Filename or Create Archive of 
Number Files from the contextual menu. You can also 


access these commands from the Finder’s Action 
menu. Panther will create an archive of the file(s) 
using the Windows-friendly ZIP format, suitable for 
e-mailing to cross-platform colleagues. 

Receiving Attachments When you receive files from 
Windows users, you can’t always tell them what 
encoding or compression standards to use. This 
means you'll have to decode and decompress garbled 
attachments on your own. 

Opening ZIP archives is an easy affair in OS X 
10.3. Just double-click on the archive in the Finder, 
and Panther will decompress the files. 

On rare occasions, Panther’s built-in tools may not 
be able to decode the file. In that case, you’ll need a 
beefier tool such as DataViz MacLinkPlus Deluxe 
($80; www.dataviz.com), which does a good job of fil- 
tering out extraneous information that can some- 
times be included in the attachment during 
transmission. It can also translate between different 
file formats, as we’ll describe later. 

Another type of unreadable file you may receive is a 
winmuil.dat attachment. If this shows up in your mail- 
box, it means you’ve received a message from someone 
using Microsoft Outlook for Windows with a Micro- 
soft Exchange Server. Winmail.dat files are created 
when the Microsoft software incorrectly combines an 
e-mail’s RTF formatting with the attached file. There 
is a fix for this—a free utility called TNEF’s Enough 
(www.joshjacob.com), which can decode this mix-up 
and separate the file from the formatting. ‘To head off 
the problem before it starts, Windows users should 
turn off RTF formatting in Outlook. 


Accessing Windows Machines 

over a Local Network 

When it comes to getting along with the Windows 
world, sharing files via e-mail is only a small part of 
the story. If you’re on a local network, there’s a dif- 
ferent set of issues. 

Traditionally, the file-sharing features of Macs and 
PCs have been incompatible—they used two differ- 
ent technologies: the AppleShare compatibility in 
Mac OS, and the Microsoft Client and Services in 
Windows. Microsoft has long given its file servers the 
option of supporting Macs. With OS X 10.1, Apple 
finally gave Mac users the ability to access native 
Windows file services. This means that an OS X user 
can access Windows file servers in two ways: the 
Apple way or the Microsoft way. The Apple way 
tends to be easier for the Mac user, but the Microsoft 
way is easier for your Windows server administrator. 

The Apple Way The Apple way is to use the Apple 
Filing Protocol (AFP), employed by AppleShare- 
compatible servers. Because Windows servers aren’t 
AppleShare-compatible, they’ll need special software 
to provide the AFP service to Macs. Luckily, Micro- 
soft’s Services for Macintosh is an AFP service that 
comes with every Windows server CD; although, it 
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isn’t installed by default—network administrators 
must choose to install it. 

If the server is running Windows 2000 Server or 
Windows 2003 Server, Mac users can access Services 
for Macintosh over TCP/IP. On Windows NT Serv- 
er, however, Services for Macintosh doesn’t support 
TCP/IP, which means you'll need to turn on Apple- 
Talk (in the Network pane of OS X’s System Prefer- 
ences). This is less than ideal since AppleTalk is 
slower than TCP/IP. 

There are also several third-party T'CP/IP-based 
AFP servers that eliminate the need for Services for 
Macintosh while enhancing performance and avoid- 
ing the hassle of using AppleTalk on Windows NT 
Server. For example, Group Logic’s ExtremeZ-IP 
(starting at $675; www.grouplogic.com) claims to be 
faster than Microsoft’s AFP server. It also runs on 
Windows 2000 Server and Workstation and can share 
printers without using AppleTalk. (Services for Mac- 
intosh run only on the server versions of Windows.) 

In Panther, you access a Windows server running 
an AFP service just as you would a Mac server: 
through the Network icon in the Finder. Double-click 
on the server name and the login window will appear. 

The Microsoft Way The Microsoft method of cross- 
platform file sharing is to use SMB/CIFS (Server 
Message Block/Common Internet File System), the 
Windows-native file-sharing technology. 

If you want to get on your network administrator’s 
good side—and if there are only a few Macs on the 
network—use OS X’s built-in SMB/CIFS client to 
access your Windows server. When you do, your Mac 
interacts with the Windows server exactly as a PC 
would. The administrator doesn’t have to install any- 
thing special on the server and doesn’t need to man- 
age Mac clients separately from the PCs. However, 
Apple’s SMB client implementation is well known for 
having problems such as file corruption—problems 
that don’t occur with AFP. 

‘To log on to a Windows server in Panther, double- 
click on the Network icon in the Finder window. You 
should see a list of Windows file servers, as well as PC 
users who have turned on file sharing. Double-click 
on a server and enter your name and password in the 
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Play Nice To give 
Windows users access 
to your Mac, activate 
Windows Sharing from 
the Sharing panel in 
System Preferences. 


dialog box that appears. (See “Where’s the Server?”) 

At press time, Panther could show only Windows 
servers that are on the same local subnet (network 
segment) as the Mac. To access others, you'll have to 
type in a URL. First, select the Connect To Server 
command in the Finder’s Go menu. In the Address 
field, type the appropriate URL in this format: 

smb://Workgroup;ServerName/ShareName 

You can skip the workgroup name if your setup 
doesn’t require one. The server name can also be an 
IP address. The share name is the name of the shared 
volume—usually a folder on the server’s hard drive. 

If you’re having trouble, try including your user 
name in the URL, like this: 

smb://Workgroup; UserName@ServerName/ShareName 

Once you’re connected, the server volume will 
appear on your desktop, just like a network Mac icon. 
‘To keep the server permanently in the menu, select 
the server and click on the Add To Favorites button 
or make an alias to the server. 

OS X’s inability to browse on multiple subnets 
isn’t a bad deal if you have only one or two servers; 
but if you’re on a bigger network, you may want to 
upgrade your Mac’s SMB abilities with Thursby 
Software’s $150 Dave (¢¢¢%; Reviews, February 
2003). Dave lets you see the Windows servers and 
the PCs with file sharing enabled, and it doesn’t 
have the file-corruption problems that SMB some- 
times suffers from. 


Giving Windows Users Access to Your Mac 

In addition to accessing files on Windows computers, 
you can also give Windows users access to the files on 
your Mac, thanks to an SMB/CIFS server introduced 
in Jaguar. To activate it, go to System Preferences, 
click on Sharing, click on Services, and then activate 


the Windows Sharing option. Windows users can 
now access your Mac, using the address listed at the 
bottom of the Sharing Window (see “Play Nice”). 
Now, go to the Accounts pane in System Preferences 
and create a user account for everyone you want to 
grant access to. They will use the name and password 
you set for them. (For an in-depth look at using 
SMB/CIFS server, see “Share Well with Others,” 
June 2003.) 


Sharing Files over a Virtual Private Network 

If the Windows file server isn’t in the same building 
as your Mac, you may need to use a virtual private 
network (VPN) connection, which is the most popu- 
lar way of accessing a company network from an off- 
site location. A VPN provides an encrypted stream 
over the Internet between you and the VPN server. 

A typical setup consists of a VPN service and 
clients. The VPN service is often a standard part of a 
Windows server, but it can also run in stand-alone 
gateway or router boxes, such as those from Cisco 
Systems and Netopia. People trying to access the net- 
work from another location may need VPN client 
software on their computers. 

Jaguar has Mac OS X’s first built-in VPN client. It 
uses Microsoft’s Point-to-Point Tunneling Protocol 
(PPTP)—the same software typically found running 
on Windows servers. Panther adds support for anoth- 
er common VPN protocol, known as IPsec (IP Secu- 
rity), which offers superior security. To configure and 
establish a VPN connection in Panther, open the 
Internet Connect utility and click on the VPN icon. 
In the VPN pane, you can choose between using 
PPTP and IPSec. ‘To enter the settings for your net- 
work, go to the Connect pop-up menu and click on 
Edit Configurations. 

You can also find third-party VPN clients that 
might work better with specific VPN hardware. For 
example, Cisco offers its own IPsec client for OS X to 
accompany its Cisco VPN 3000 Series Concentrator 
(www.cisco.com/kobayashi/sw-center/vpn/client/). 

If your office uses other VPN hardware, you can 
try Equinux’s VPN Tracker ($89; www.equinux.com), 
an IPSec client specially tuned to work with a variety 
of VPN concentrators and gateways. Another PPTP 
client for OS X, Gracion Software’s Digi’Tunnel ($58; 
www.gracion.com/vpn/), can access Windows VPN 
servers and has some features not found in OS X’s 
built-in client, including a split-routing feature that 
lets you connect directly to any Internet sites while a 
VPN connection is active. 


Sharing without Wires 

Ethernet and the Internet aren’t the only games in 

town anymore. These days, Mac users can also com- 

municate with Windows PCs over wireless networks. 
Apple’s AirPort Extreme cards and Base Station use 

the same 802.11g¢ technology as PC wireless products 


such as the Proxim Orinoco and Dell Centrino lines 
use. This means that Macs and Windows PCs can 
communicate using an AirPort Base Station or a 
wireless access point aimed at the PC market, such as 
those from 3Com and D-Link. An AirPort Base sta- 
tion configured for Internet access will allow PCs to 
access the Internet as well. The same compatibility 
issues that exist for AirPort and AirPort Extreme exist 
for PCs—the faster 802.11g cards will slow down to 
talk to the older 802.11b cards. 

Cross-Platform AirPort Setup When you're creating 
a cross-platform wireless network, it’s usually easiest 
to use the AirPort Base Station because the configu- 
ration software comes with your Mac and it is easier 
to use than the software for other base stations. 

If you use Wireless Encryption Protocol (WEP), 
you may find that the AirPort network doesn’t 
accept the passwords entered by Windows users. To 
fix this problem, try using the equivalent network 
password. Open OS X’s AirPort Admin utility, select 
the Base Station from the list, and click on Config- 
ure. Enter the Base Station password in the dialog 
box that pops up, and then click on the Password 
icon at the top of the window. A new window will 
appear showing the network equivalent password 
that you can use on the PC. 

Configuring AirPort from a PC You can also config- 
ure an AirPort Base Station from a Windows PC. 
Apple has a free Windows version of the AirPort 
Admin utility at http://docs.info.apple.com/article 
-html?artnum=120093. This software works only on 
the newer dual-Ethernet Base Station (the white 
model, not the older silver model). 

Setup Troubles You may run into trouble setting up 
your wireless cross-platform network if you try to 
establish a VPN connection. What’s probably amiss is 
that your AirPort Base Station or other firewall is 
using a technique known as network address transla- 
tion (NAT). NAT is a common firewall technique that 
prevents computers on the Internet from seeing the 
IP addresses of machines on a local network, thereby 
blocking intruders from accessing your local network. 

One way to deal with this is to turn off NAT. For 
the AirPort Base Station, open the Airport Admin 
utility, click on the Network tab, and deselect the Dis- 
tribute IP Addresses option. Fortunately, you don’t 
have to give up your firewall—you can install NAT or 
another firewall elsewhere on the network, such as on 
a server or stand-alone router or gateway box. 

Another option, available in some of the higher- 
end servers such as the Cisco VPN hardware, is a 
NAT transparency mode. This essentially makes the 
router VPN-aware. 


What to Do Once You've Got the File 

Whether you use e-mail or file sharing to swap files 
with Windows users, you'll need an application that 
can read the files once you have them. For instance, 


Microsoft Word X can read files created by Word for 
Windows. The same is true for Excel and Adobe 
Photoshop, as well as for many other applications 
that exist on both Mac and Windows. Sometimes 
applications can read files created by other applica- 
tions. For instance, AppleWorks 6.2 can read and 
save Word and Excel files. For users who only occa- 
sionally need to work with Word files, Panther offers 
a built-in solution. You can now open and edit Word 
documents in TextEdit and then save them as a Word 
file. TextEdit doesn’t offer all the options Word does, 
but it gets the job done. 

However, you can still run into trouble with older 
software versions. An older version of Excel for Mac 
may not save enough information for a Windows PC 
running Excel XP. Or you may receive a file in a for- 
mat that none of your Mac applications can read. In 
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these cases, you'll need a file-translation utility. 

Conversion Aids The best all-around file-transla- 
tion tool is DataViz’s MacLinkPlus Deluxe ($80; 
www.dataviz.com), which can translate between Mac 
and Windows word-processing, spreadsheet, graph- 
ics, and database formats. (It can also decode e-mail 
attachments.) MacLinkPlus will allow you to view the 
contents of certain files before you translate them. 
Just drag and drop your file or folder to the Mac- 
LinkPlus alias in the Finder to launch the utility. 

If you need to only read and print Excel files (not 
create or edit them), Panergy’s icExcel ($20; www 
.icword.com) offers a less expensive solution. 

OS X’s QuickTime can translate many PC graph- 
ics formats—just open them with QuickTime Play- 
er—but it can’t save files in PC formats, unless you 
upgrade to QuickTime Pro. Lemke Software’s 
GraphicConverter ($30; www.lemkesoft.de) can 
translate dozens of graphics formats. 

Lost in the Translation One problem with file trans- 
lation is that the conversion isn’t always exact. Either 
the translation program or your application may sub- 
stitute fonts, resulting in different text sizes or text 
that no longer fits neatly on one page. Differences in 
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Bring Windows to the Fold 
If you have only a few PCs ina 
predominantly Mac network, 
consider installing Miramar’s PC 
MacLAN ($189; www.mira 
marsys.com) on the Windows 
machines to allow them to share 
files and access printers. 


the Mac and Windows software can change the place- 
ment of graphics, the colors in graphics, or the thick- 
ness of lines. 

If it’s important that the PC users see the format- 
ting you’ve created and they don’t need to edit the 
file, you can save a file in PDF format, which most 
Windows users can read. You don’t need a special 
utility to do this because OS X has the built-in ability 
to convert any file to PDF. To do this, select Print 
from the File menu of an OS X application. In the 
Print dialog box, click on the Save As PDF button. 


Naming No-No’'s 

When you create files for Windows users, pay atten- 
tion to how you name the files. OS X allows a more 
varied use of characters in file names than Windows 
does. Using illegal charac- 
ters in file names can render 
a file invisible or un-open- 
able on a PC. Stay away 
from punctuation, such as 
slashes (/ and \), question 
marks (?), and brackets ([]). 
(Although OS X prevents 
you from using forward 
slashes in the Save dialog 


box, you can use them when naming files in the Find- 
er or in Classic applications’ Save dialog boxes.) 
Hyphens (-) and underscores (_), however, are OK. 
And never begin a file name with a space. Also, make 
sure that the file ends with a period followed by the 
appropriate three-character extension such as .doc for 
Word files, .mp3 for MP3 music files, and .jpg for 
JPEG images. (Many Mac OS X applications will 
automatically add the extension, but Classic applica- 
tions usually don’t. OS X also allows you to delete 
extensions and lets you choose whether to display 
them [Finder: Preferences].) Don’t include any other 
periods in the file name. 


More Coexistence to Come 

Mac OS X 10.2 advanced the Mac’s compatibility 
with Windows networks, and Panther goes even fur- 
ther, but knowing what OS X can do will always be 
up to you. Many Microsoft-certified IS managers and 
network administrators don’t recognize the Mac’s 
cross-platform capabilities or realize that there’s soft- 
ware that can help. They will often assume that it 
can’t be done. You can show them that it can. 


i! JOHN RIZZO is the editor of MacWindows.com (a resource for informa- 
tion about cross-platform integration) and a CNet contributing editor. 
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Optimize Classic 


ALTHOUGH THERE’S A WEALTH OF OS X-COMPATIBLE SOFT- 
ware out there, you may be stuck in the past with older hardware or software 


that hasn’t yet made the switch. In 


Classic environment. But if you find Classic to be 
unbearably slow, don’t despair—there’s a lot you can 
do to speed up its start time, increase its overall sta- 
bility, and even reduce the amount of hard-drive 
space it requires. 


Classical Beauty 

Because everyone uses OS X’s Classic mode different- 
ly, there’s more than one right way to optimize it. The 
general idea is to streamline the environment by 
removing the control panels and extensions not 
required for the tasks you perform in Classic. There 
are three ways of doing this: optimize your existing 
System Folder, create a new customized System Fold- 
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er, or create a new optimized System Folder. Your 
needs will determine which option is right for you. 

If you want the smallest and fastest-loading Classic 
possible and you don’t plan to boot directly into OS 9, 
your best option is to create a new System Folder that 
is optimized specifically for Classic. However, if you 
want a relatively small Classic mode that’s also capable 
of serving double duty as an OS 9 System Folder, you'll 
need to create a new System Folder customized for 
both tasks. And if you’re not all that concerned about 
Classic’s loading speed but you want a faster and more 
stable Classic environment—or if you’ve purchased a 
new Mac that doesn’t come with OS 9—you should 
continue to use your existing OS 9 System Folder and 
remove any superfluous extensions. 


this case, you'll have to use OS X’s 


Optimize an Existing System Folder 

If you choose to use your existing OS 9 System Fold- 
er as your Classic environment, you won’t have to 
reinstall programs, fonts, or extensions—everything 
you need will already be in your System Folder. How- 
ever, you'll need to do a fair amount of work to make 
Classic stable and quick to load. 

While in Classic mode, open the Extensions Man- 
ager control panel (9 System Folder: Control Panels: 
Extensions Manager) and duplicate your OS 9 exten- 
sion set. In addition to providing a backup if some- 
thing goes wrong, this step also gives you access to 
your full extension set if you boot directly into OS 9. 
Remember to rename your duplicate set—for exam- 
ple, “Classic Set.” 

Begin browsing the Control Panels and Extensions 
folders for Apple-supplied bits that are unnecessary 
in Classic (see “Slim Down”). For example, OS X 
includes video drivers for Classic, so there’s no need 
to load your ATI or Nvidia drivers. 

Unfortunately, except for pieces that OS X adds or 
updates when you first run Classic, there’s no specific 
list of what is and is not required for Classic to func- 
tion properly. To truly optimize your existing OS 9 
System Folder, you'll have to experiment by disabling 
control panels and extensions on a case-by-case basis 
and seeing what happens. 

‘To determine which extensions you need to keep 
and which you can do without, disable a few exten- 
sions and/or control panels at a time (via the Exten- 
sions Manager), restart Classic, and see if everything 
you need still functions. If it does, you can disable 
more files and try again. When something stops 
working, restore the last file(s) you disabled. (As a 
general guideline, OS X provides most of the hard- 
ware support for Classic, which means you can dis- 
able things such as mouse drivers, Ethernet 
controllers, and so on.) 

If you find that Classic has trouble loading, the cul- 
prit is probably an incompatible third-party exten- 
sion. When this happens, disable your third-party 
extensions one by one until you find the troublemak- 
er. You may also find that some third-party extensions 
don’t work in Classic at all, so you should disable 
these as well. For example, if your scanner’s driver 
won’t allow the scanner to work in Classic, as it did 
in OS 9, there’s no reason to load the extension. 


Create a New Classic Environment 

If you have multiple hard drives (or more than one 
partition), you can create a new OS 9 System Folder 
optimized for use only in Classic. This way, you can 
keep your full set of OS 9 extensions for times when 
you need to boot into OS 9—for example, if you need 
to use an application that isn’t supported in OS X’s 
Classic environment. 

In many ways, it’s easier to start from scratch and 
install a new OS 9 for Classic because you won't have 
a large batch of third-party extensions and control 
panels to work through. However, there is a trade-off 
to consider: You'll need to reinstall programs—such 
as Internet Explorer or FileMaker Pro—that put 
pieces of themselves into the System Folder. You can 
identify these programs by looking in your existing 
OS 9 System Folder. Be sure to check out both the 
top level of the System Folder (for Eudora and Claris, 
for example) and inside the Extensions folder (for 
Macromedia and others). The Preferences folder 
may also contain application code, so it’s worth a 
quick look as well. 

Setting up a simplified System Folder will save disk 
space and allow Classic to load more quickly. For 
example, a full OS 9 installation requires 285MB of 
drive space on my G4/733, and it takes about 22 sec- 
onds to launch in Classic. In comparison, my fully 
optimized Classic folder takes only 87MB of drive 
space, and it loads in about 12 seconds. 

Despite the differences in size and launch times, 
both the customized and the fully optimized Classic 
installations support Internet connectivity, printing 
to a LaserWriter over AppleTalk, viewing Java 
applets in Classic browsers, and running Software 
Update in Classic. There are some disadvantages to 
the smaller, fully optimized installation—such as dis- 
abled Text-To-Speech and Apple Guide in Classic— 
but if you find these features necessary, you can 
always add them to your Classic System Folder. 

If you have a machine that’s capable of booting 
directly into OS 9, you can optimize a new OS 9 
installation for Classic by choosing either a cus- 
tomized installation or a fully optimized installation. 
The fully optimized installation will require a bit 
more effort to create, but it will save 50MB of drive 
space and shave off a few more seconds at launch 
time. (If you have a newer machine that can’t boot 
into OS 9, you'll have to customize Classic with the 
method described in the previous section.) 

Customized Install When you customize your OS 9 
installation you'll save more than 100MB of drive 
space. It’s also very easy to do—assuming you still 
have your OS 9 installation CD. 

Boot your machine from the OS 9 CD, launch the 
installer, and identify the target drive or the partition 
for the new installation. After reading and accepting 
the license agreement, click on the Customize but- 
ton. Leave the Mac OS 9.X option selected and then 
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deselect all the remaining options except Mac OS 
Runtime For Java (see “Customizing Classic”). 
Although OS X includes Java, you'll need to install 
Java in Classic to view the applets in Classic 
browsers—for when you test Web pages, for exam- 
ple. In addition to the services mentioned earlier, this 
method will also give you a full set of standardized 
Apple-menu items and control panels. 

Fully Optimized Install A fully optimized installation 
creates the smallest, fastest-loading Classic environ- 
ment possible. This system may not boot into OS 9, 
but it will provide a lightning-fast, fully functional 
Classic environment. 

Start by following the instructions from the previ- 
ous section to customize the installation, and then 
select the Customized Installation option from the 
pop-up menu located to the right of the Mac OS 9.X 
line item. For this optimized Classic environment, 
leave the Core System Software option selected and 
then deselect all the remaining options except Fonts. 

Once you’ve done that, you’ll need to go back and 
enable a few individual items. Select QuickTime in 
Multimedia, LaserWriter 8 in Printing, Chooser in 
Apple Menu Items, and Software Update in Control 
Panels. 

Finally, you have a bit of additional work to do in 
the Network & Connectivity category. First enable 
AppleShare and then open the Security subtopic and 
select Network Security. This last step is necessary 
for making Software Update function in the Classic 
environment—useful if you’re creating a Classic that 
can’t boot into OS 9. 


Launching Pad 

You now have a slimmer, faster System Folder for use 
in the Classic environment. If you have other needs— 
such as Text-To-Speech or the use of the Apple 
Guide—boot from the Mac OS 9 installation CD and 
then add the pieces that you want. If you invest the 
time it takes to slim down your System Folder, you will 
find that an improved Classic environment makes for 
a much more productive Mac OS X experience. 


Customizing Classic 
You can give Classic a 
much-needed kick in 
the pants by installing 
a new OS 9 system 
with just the pieces 
you need. 


| ROB GRIFFITHS is a regular Macworld columnist. He also runs the Mac OS X Hints Web site (www 


-macosxhints.com). 
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OS X's Overlooked Shortcut 


IF YOU’RE LIKE MOST MAC USERS, YOU’VE PROBABLY NEVER 
taken advantage of OS X’s services—systemwide shortcuts that let you use one 
application’s abilities from within another. If this is the case, you’re missing 


out on a great productivity tool. Services, which are 
available from the application name: Services sub- 
menu, let you work quickly with text, graphics, 
files, folders—almost any kind of content. More 
specifically, they allow you to draw on the powers of 
another application if the one you’re working in 
doesn’t provide the tools you need. 

Services in Action You have to see services in action 
to really appreciate them. ‘To take advantage of them, 
you select the desired content and then choose a ser- 
vice from the submenu. 

Say someone e-mails you directions to a party, and 
you want to create a Stickies note with that infor- 
mation. You could highlight the text in Mail, copy it, 
launch Stickies, open a new note, and paste the text 
into the note. But with services, you can simply high- 
light the text and select Mail: Services: Make New 
Sticky Note. (Or in this case, you could press ¢-shift- 
Y; many services have their own keyboard shortcuts, 
which are listed next to the service name in the menu.) 

Or perhaps you’re browsing a Web site in Safari 

and you want to copy some text to a new TextEdit 

document. Just highlight the text, and then 
select Safari: Services: TextEdit: Open Selec- 
tion. What if you want to add a screenshot 
to a TextEdit document? Instead of tak- 
ing the shot, finding it on your desktop, 
and dragging it to TextEdit, place the 
cursor where you want the screenshot to 
appear in the document, and select 
TextEdit: Services: Grab: Screen (or 
Selection, if you want only part of the 
screen). Grab will take the screenshot and 
insert it into your document. 














Another interesting example is the Summarize ser- 
vice, which will reduce a large block of text—an 
online news article, for example—to a brief summary. 
Select a large text passage in a program that supports 
services, such as TextEdit, Safari, or Mail, and then 
select application name: Services: Summarize. A sum- 
mary of the selected text will appear in a new window. 
You can even decide how compact the summary 
should be. Once you're satisfied, you can copy the 
summary for use in another app. I’ve found that the 
summaries this service generates are often surpris- 
ingly accurate. 

Tip: If you find the Services submenu cumber- 
some, Nicholas Riley’s free utility ICeCoffEE (6666; 
“More Mac Software Bargains,” May 2003), lets you 
add a Services menu to the menu bar and/or to your 
systemwide contextual menus. Download it from 
http://web.sabi.net/nriley/software/. 


Expanding Your Services 

The previous examples demonstrate OS X’s built-in 
services, but the real power of the services system lies 
in its expandability. Applications can add their own 
services, and you can install third-party services pack- 
ages yourself. 

Application Additions Placing an application in 
your Applications folder will make its services avail- 
able the next time you log in. Select Go To Folder 
from the Finder’s Go menu, enter /Applications, and 
click on Go to open the Applications folder. (If you 
delete an application, its services will disappear when 
you next log in.) 

For example, if you often gather text for research, a 
number of information databases, such as Devon Tech- 
nologies’ $35 Devonthink (www.devon-technologies 
.com), provide services that let you select text in any 
application and then quickly add it to your database as 
a plain-text or rich-text note. (It can even summarize 
long passages of text.) Using these services, you can 
reduce a five- or six-step process to one or two steps. 

Likewise, applications such as Bare Bones Soft- 
ware’s BBEdit, Apple’s Safari, and The Omni Group’s 
OmniDictionary have their own services for working 
with text, opening URLs, and looking up word defin- 
itions, respectively. 

Stand-Alone Services ‘To install a services package 
that isn’t associated with any application and make it 


available to all users of your Mac, put it in the Ser- 
vices folder inside your general Library folder. Select 
Go To Folder from the Finder’s Go menu, enter 
/Library/Services, and click on Go to open the Services 
folder inside this Library folder. To restrict its use to 
just your own account, select Go To Folder from the 
Finder’s Go menu and enter ~/Library/Services (the 
tilde [~] represents your Home folder). Click on Go 
to open the Services folder inside your user folder’s 
Library folder. After you log out and then back in, the 
new services will be available. 

You can find many third-party services packages at 
Version Iracker.com or MacUpdate.com (search for 
service). One of the best is Devon Technologies’ free 
Word Service 2.5 (www.devon-technologies.com/ 
freeware.php). This package provides 34 functions 
for working with text. For example, it can automate 
text formatting, such as altering line endings and 
sorting lines, as well as text conversion, such as 
changing capital letters to lowercase ones or chang- 
ing straight quotation marks to smart ones. 

Other add-on services provide shortcuts for all 
kinds of tasks. KavaSoft’s $5 Translation Service 
(www.kavasoft.com/TranslationService/index.html) 
lets you translate selected text to and from a number 
of languages, including major European and Asian 
languages and even Russian. 

Stas Pietrucha’s free Terminal Services 1.0 (http:// 
homepage.mac.com/stas/terminalservices.html) lets 
you select a bit of code (for example, Unix commands 
from a Web tutorial or from another Terminal win- 
dow) and execute it as a command in Terminal. Nick 
Matsakis’s free Browser Service 1.0 (http://mit.edu/ 
matsakis/software/BrowserService/) lets you choose 
which browser will open a highlighted URL, regard- 
less of the browser you’ve chosen in Internet prefer- 
ences. In fact, you can even highlight a URL in one 
browser and then use Browser Service to open that 
URL immediately in a different browser (helpful for 
Web sites that still aren’t compatible with Safari). 

Finally, Selznick Scientific Software’s unique $15 
AtYourService 1.0 (www.selznick.com) not only adds 
a number of services related to translation, Terminal, 
and Web activities, but also lets you create custom 
Services and add them to the submenu. For example, 
if you find yourself frequently performing the same 
actions on text, you can create your own set of text 
manipulations and make it available as a service. 


Avoiding Bad Service 

Services are great, but they do have a few limitations. 
Sometimes you'll find that the submenu is either 
dimmed or empty. The most common reason for this 
is that you haven’t yet selected content (text, graph- 
ics, or a file or folder) that a service can use. 


MAC GOODIES 


Many Mac users subscribe to Apple’s 
.Mac service, but few take advantage of 
the three excellent and free utilities 
Apple provides to members. (You can 
download them all after logging into 
the www.mac.com Web site.) 

1. Mac Slides Publisher allows you to 
create a slide show from a group of pho- 
tos, and then upload it to your iDisk so other 
OS X users can subscribe to it. Make sure 
you're connected to the Internet, and then drag a 
group of JPEG photos onto the .Mac Slides Publisher 
icon. Publisher automatically creates the slide show and 
uploads it to your iDisk. To view your show, other Mac users simply select System Pref- 
erences: Screen Effects, click on .Mac, and then click on Configure. In the dialog box 
that appears, they enter your .Mac membership name. 

2.Apple’s iDisk Utility provides a number of tools for working with iDisks. Like the 
iDisk tab of OS X's Internet preferences, iDisk Utility lets you quickly check the capacity 
and current usage of your iDisk, as well as configure your iDisk’s Public folder. However, 
iDisk Utility also provides a few unique options. 

The Open Public Folder screen allows you to quickly open any member's iDisk Public 
folder simply by typing the user's member name. (If the folder is password-protected, 
you'll be prompted for the password.) The Open iDisk screen lets you access any iDisk by 
entering the .Mac member name and password. These features are much quicker than 
using OS X's Connect To Server dialog box. In addition, if you have more than one iDisk, 
iDisk Utility lets you access any of them quickly. (The Finder's Go: iDisk command works 
only for the single account listed in the iDisk tab of the Internet preferences pane.) 

3. Apple’s iDisk Utility for Windows XP provides the same tools as the OS X version 
and is actually the only way to work with an iDisk from a computer running Windows. 
Apple encourages .Mac members to distribute the utility to their Windows-using friends. 





But that’s not the only possibility. Some programs 
don’t make use of services. Most apps written in Apple’s 
Cocoa environment support them; however, develop- 
ers not using Cocoa face some extra work. Currently, 
some popular applications such as Microsoft Word 
don’t take advantage of services, although other non- 
Cocoa apps, such as BBEdit and OS X’s Finder, do. 

Another hitch: As of OS X 10.2, having too many 
(more than 70) services installed prevents the Ser- 
vices menu from functioning in non-Cocoa applica- 
tions that support services, including the Finder. If 
this happens to you, remove a few of your custom- 
installed services and then log out and back in. 


Services with a Smile 

Services can streamline the way you work. In addi- 
tion, as more and more companies update their appli- 
cations to take advantage of services, and as others 
release third-party service packages, the system will 
only get better. Start taking advantage of it now. 


| DAN FRAKES is Macworld’s Mac Gems columnist, an editor at MacFixlt.com, and the author of Mac OS X 
Power Tools (Sybex, 2003). He is currently hiding out at www.danfrakes.com. 


Working Mac is a monthly collection of tips that will help you be more efficient—and help you get home in time for dinner. We want to hear from you! If you've got secrets to share or 
suggestions for column topics—or if you just want to tell us what you think of Working Mac—e-mail us at workingmac@macworld.com. 
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Printing Power 


Some Mac users face a dilemma—they can use either OS X or their printers. 
Many older printers don't have OS X drivers, and some OS X 10.1 drivers 

don't work in OS X 10.2. But don’t run out and buy a new printer. By taking 
advantage of CUPS, Jaguar's new core printing technology, you may be able 
to bring that old printer—and many Windows printers—into the OS X fold. 


The Common Unix Printing System (CUPS) was 
developed in 1999 to provide a standard printing 
system for all versions of Unix. Apple licensed this 
open-source technology for Jaguar. It provides a 
number of useful features, including print spooling, 
print-job management, network-printer directory 
services, a Web interface, and PPD (PostScript 
Printer Description) support. Here’s how to take 
advantage of some new possibilities CUPS brings 
to the Mac. 


Open-Source Software to the Rescue 

The people who have been hit hardest by OS X’s 
limited printer support are those using very expen- 
sive (costing thousands of dollars) large-format 
printers that have no OS X drivers. However, Jag- 
uar doesn’t officially support even some of the 

most basic printers—such 

as older ink-jets; nor does it 
support dot matrix printers, 
which people still widely use 
for carbon-copy printouts. 
(You can see a list of Jaguar’s 
supported printers at www 
-apple.com/macosx/upgrade/ 
printers.html.) 

The first way CUPS can 
help is if you have a PPD file 
for an unsupported printer. 
(The software discs that 
came with your printer usu- 
ally provide these files.) You 
can often get your printer 
to work just by selecting the 
PPD file in Jaguar’s Print Center utility. 

Driver Power However, CUPS’ biggest bonus is 
that it gives users the ability to take advantage of 
open-source printer drivers, most notably the Gimp- 
Print driver package. Install the Gimp-Print package 
and your Mac will instantly support hundreds of 
additional ink-jet, laser, line, and dot matrix printers. 


Although Gimp-Print drivers work well for most 
applications, they don’t work properly with those that 
generate their own PostScript, including many Adobe 
applications and AppleWorks. You can solve this 
problem by also installing a PostScript interpreter, 
such as the CUPS-compatible ESP Ghostscript. Once 
installed, ESP Ghostscript works invisibly in the 
background to allow the Gimp-Print drivers to work 
with these applications. 

Gimp-Print and ESP Ghostscript make an impres- 
sive number of older Mac printers fully usable in 
OS X. You'll also be able to use many printers previ- 
ously supported only in Windows or on the Mac 
via a utility such as Strydent Software’s PowerPrint 
($99; 604/296-3600, www.strydent.com). Currently, 
there isn’t an OS X version of PowerPrint. 

You can see a complete list of printers supported by 
Gimp-Print at http://gimp-print.sourceforge.net/p_ 
Supported_Printers.php3. The site rates each printer 
by its current level of functionality. 

Getting Ready Download the disk-image files for 
Gimp-Print (I recommend the latest final release 
rather than a newer prerelease version) and ESP 
Ghostscript from http://gimp-print.sourceforge.net/ 
MacOSX.php3. 

Mount them in the Finder by double-clicking on 
each disk-image file. If your printer connects to 
your Mac via USB, you should make sure that the 
printer is connected and turned on before proceed- 
ing with installation. 

‘To install Gimp-Print, double-click on the 
Gimp-Print package (Gimp-Print 4.2.3.pkg at 
press time); you'll be asked for an administrator 
user name and password. Follow the instructions 
to install the drivers. (Make sure to select your 
start-up disk when prompted if you have more 
than one volume.) Follow the same procedure to 
install the ESP Ghostscript software. Restart after 
installation is complete. 

Setting Up Now that you’ve added support for 
your unsupported printer, you need to set it up. 


Although you can use CUPS’ built-in Web interface 
(which [ll discuss later) to set up printers, using Jag- 
uar’s Print Center utility is easier (you'll find this in 
Applications: Utilities: Print Center). 

If your printer uses USB, hold down the option 
key and click on the Add button in the Print Center 
toolbar. You'll see the standard dialog box for adding 
a printer, but the pop-up menu at the top of the win- 
dow will include an Advanced option—select it. 
Click on the Device pop-up menu, and your printer 
should appear at the bottom of the list. (If it doesn’t, 
make sure it’s turned on and connected.) 

You can rename your printer, but don’t change 
the device URL. Click on the Printer Model pop-up 
menu to select the printer manufacturer, and then 
select the printer model or name in the Name win- 
dow. For the PPD file of a printer that’s not listed, 
select the Other option in the Printer Model pop-up 
menu, and then browse directly to the PPD file. If 
this file is located on your printer’s software CD or 
floppy disks, copy it to your hard drive first. Click on 
the Add button to finish. 

TCP/IP Printing If your printer or print server is 
available over TCP/IP, use Print Center to set up an 
IP printing queue. First you’ll need the IP address 
and queue name of the printer or print server. 

Click on the Add button in the Print Center 
toolbar; then select IP Printing from the pop-up 
menu at the top of the window. Enter the IP 
address of the printer or print server in the Print- 
er’s Address field, and enter the queue name in the 
field below. Click on the Printer Model pop-up 
menu and select the printer manufacturer; in the 
Model Name window, select the printer model 
or name (or select Other from the Printer Model 
menu to select a specific PPD file). Click on the 
Add button to finish. 

Some unsupported AppleTalk printers (and Local- 
‘Talk printers using a Local'Talk-to-Ethernet adapter) 
are also supported via Gimp-Print. To set up one 
of these, use the instructions for setting up a USB 
printer. You'll find the printer listed in the Device 
menu in the Advanced setup window. You can even 
print to a shared printer connected to a Windows 
computer via OS X’s built-in Samba support. (Samba 
provides built-in Windows networking compatibil- 
ity.) Follow the instructions for setting up a USB 
printer, but after selecting the Advanced option, 
select Windows Printer Via Samba from the Device 
pop-up menu. Enter the URL of the Windows 
printer or print server in the Device URL field. 

A printer supported by the Gimp-Print drivers 
works just as you would expect. In most print dialog 
boxes, you'll find printer-specific features (such as 
multiple printer trays) in a Printer Features panel 
available via the Options pop-up menu. 

Rough Edges Gimp-Print isn’t a commercial prod- 
uct, and it comes with no guarantees. Some printers 
may not work perfectly—for example, a particular 


driver might not support 
all of a printer’s features. 
That said, the open- 
source community is usu- 
ally responsive to reports 
of bugs and quite helpful 
when problems come up. 
Check out the FAQs and 
support forums on the 
Gimp-Print site (http:// 
gimp-print.sourceforge 
net/p_FAQ_OS_X.php3 and http://sourceforge.net/ 
forum/?group_id=1537, respectively). 


Under New Management 

Open-source driver support may be the hidden gem 
of Jaguar’s new reliance on CUPS, but CUPS brings 
other benefits. It adds the ability to manage printers 
and print queues via a Web interface. Go to http:// 
127.0.0.1:631 (which is simply port 631 on your own 
Mac), and you'll see a CUPS administration screen 
(see “Remote Control”). 

From here you can manage printers, start and stop 
print jobs, and configure printer classes. (A printer 
class is a group of printers that act as a pool. Docu- 
ments go to the first available device in that class.) 

Web Access You can access this management screen 
remotely using a Web browser on another computer. 
This is handy for network administrators diagnosing 
problems from afar. Simply type http://ipaddress:631/ 
(where ipaddress is your computer’s IP address) in the 
Address field of any Web browser. (If your computer 
is behind a firewall, make sure port 631 is open.) 

This remote access works even if Web Sharing is 
turned off. Therefore, if you don’t want others to see 
your print-management Web interface (including 
the names of documents you’ve printed recently), 
block port 631 with a firewall. You won’t be able to 
access the management features, either. 

Troubleshooting Tool Don’t overlook another nice 
touch—the ability to print a test page to verify connec- 
tivity and driver support. When you're having prob- 
lems printing, use the Print Test Page feature to figure 
out whether the printer is connected and functional. 
If the test page prints successfully, the problem most 
likely lies in the application. Read up on CUPS’ Web- 
based management abilities in the CUPS manual that’s 
built into OS X (http://127.0.0.1:63 1/sam.html). 


A Cup Half Full 

Jaguar’s CUPS-based printing architecture is a lot like 
OS X itself: it brings the benefits of open-source and 
Unix technologies to the average Mac user. Users of 
unsupported printers may find that CUPS and Gimp- 
Print save them the cost of a new printer. For every- 
one else, CUPS opens the door to more control over 
your printers than Apple has ever before provided. (1 





Remote Control 
CUPS gives you the 
ability to manage print- 
ers, print queues, and 
printer classes right in 
your Web browser— 
and that's particularly 
handy if you're a sys- 
tem administrator. 





DAN FRAKES is the author of the upcoming book Mac OS X Power Tools (Sybex, 2003). 
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Aye, Commander 
FinkCommander lets 
you download, compile, 
and install Unix apps 
with ease—all from a 
nice Aqua interface. 


| SECRETS BY JIM AKIN 


X11 Marks the Spot 


IF THE IDEA OF RUNNING UNIX APPLICATIONS ON YOUR 


Mac excites you but using Terminal drives you crazy, you may be wishing for 
some sort of middle ground between OS X’s polished Aqua interface and its 


raw command line. Your wish has already been 
granted, in the form of X11, a longtime Unix system 
for running applications that have graphical interfaces 
you control with your mouse. With X11, you can run 
a host of powerful, useful, fun, and free applications. 

Apple has integrated X11 into Mac OS X 10.3 
(Panther), but even if you’re not using Panther, you 
can get a jump-start by installing the public beta ver- 
sion of X11 from Apple and then using another pro- 
gram, FinkCommander, to find, install, and use cool 
X11 applications. 


A Bit of Xposition 
Before installation begins, here’s a little background: 
The terms X11, X Window System, and just plain X are 
interchangeable and refer to a collection of software 
modules and libraries that replicate the interface expe- 
rience of Mac OS or Windows for the Unix crowd. 
Variants of X11 have been developed to run on vir- 
tually every computer platform, and serious X11 fans 
have been running one of them, the open-source 
XFree86 (originally built for Intel-based PCs), on 
Macs since the earliest days of OS X. Last year Apple 
released its own version of XFree86 with a few 
enhancements, including default support for OS X 
Quartz technology, which produces familiar trans- 
parent windows, buttons, scroll bars, and so on. 
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current xscrabble 0901-3 Scrabble game for X games 0901-3 
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Graphical traceroute 
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16.2/release/main qudiofile-shlibs @.2.3-4 [261kB] 4 
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18.2/release/main esound-shlibs @.2.28-1 [58.6kB] 
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Get:13 http://us.dl.sourceforge.net 10.2/release/main orbit 6.5.17-5 [195kB] 
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Getting Started 

Before you install X11, remember that it’s beta soft- 
ware, so the usual caveats apply: back up your system 
before installation, and test all X11 applications thor- 
oughly to make sure they’re stable before using them 
for critical work. Having said that, X11 beta 3 proved 
very stable in our testing. And because X11 runs on a 
peer level with the Aqua interface—both run on top 
of your Mac’s Unix core—neither it nor the applica- 
tions that run under it are likely to interfere with your 
Aqua or Classic applications or settings. 

Before you download X11, you'll need an up-to- 
date version of the December 2002 release of Apple’s 
Developer Tools for OS X. If you didn’t get it with 
your copy of Jaguar, go to https://connect.apple.com, 
fill out a registration form, click first on Download 
Software and then on Developer Tools, and download 
the latest version of the package and any updaters. 
The Developer Tools installer, which requires an 
administrator-level password, will create a new 
/Developer folder. Resist the temptation to move the 
folder to /Applications or anywhere else. 

Now it’s finally time to grab X11. Head to www 
-apple.com/macosx/x11/download/, click on the 
Download X11 button, and then go back and click on 
the Download SDK link in the lower right corner of 
the page. Run the X11 installer and then the SDK 
installer. When it’s all done, click on the X11 icon in 
your Applications folder and fire up X11. You’ll know 
you’ve succeeded when your cursor briefly turns into 
a cool X and a window, titled xterm, that looks suspi- 
ciously like Terminal opens on your screen. 


Welcome to X11 
Before you get started with X11, it’s a good idea to 
make it a bit more Mac-like. 

Choose X11: Preferences and select Emulate Three 
Button Mouse. Once you do this, a single-button Mac 
mouse will act like a three-button Unix mouse: 
option-click will emulate a right-click (which appears 
in X11-application shortcut lists as Ctrl-Click or 
C-Click) and $-click will emulate the middle button 
(M-Click or Meta-Click in shortcut lists). 

In standard Linux applications, switching between 
open windows requires clicking on each new window 
twice. The first click “focuses” the window, or makes 
it active; the second interacts with the contents of 














the window, moving a cursor or activating a button. 
A hidden option in Apple’s X11 application elimi- 
nates this excruciating click-to-focus behavior. To 
turn the option on, quit X11, open Terminal, and 
type defaults write com.apple.x11 wm_ffm true. 


When you restart X11, all windows will respond on 
the first click. 


Think Fink 
The powerful FinkCommander utility works with 
the Unix command fink to let you browse a con- 
tinually updated directory of Unix applications 
and download, install, or update any program 
you choose. 

As with X11, you'll need to install a couple of com- 
ponents to get FinkCommander up and running. 
First, download and run the Fink binary (http:// 
fink.sourceforge.net/download). As you’re installing 
Fink, you'll be prompted to create a file named .cshre 
in your Home directory—agree by typing Y and 
pressing return. If you don’t do this (or if you 
aren’t prompted to for some reason), you can do it 
yourself by entering the following Terminal com- 
mand: echo -n “source /sw/bin/init.csh" > ~/.cshre. 

Once all that ugliness is out of the way, just down- 
load FinkCommander from http://finkcommander 
.sourceforge.net and then install it in your Applica- 
tions folder. 

From FinkCommander, you can browse for cool 
programs to try. Note that not all the programs you 
see in FinkCommander are compatible with X11, 
and that X11-compatible programs aren’t confined 
to FinkCommander’s X11 category. Highlight a 
program’s name and press 3-I for an expanded 
description; in the likely event you want even more 
information, follow the link to the developer’s Web 
site—just remember to return to FinkCommander 
when you want to download and install the pro- 
gram, rather than using links on the developer’s site. 

When you're ready to install the software, click on 
the leftmost toolbar item (or choose Binary: Install) 
to begin the process. 

Once you’ve installed an application with Fink- 
Commander, you can add it to X11’s Applications 














_ More Info: 


Apple's X11 Help menu links to an all-but-useless 
Web page, so try these sites for more information: 
Apple's X11-Users Mailing List Archives 
www.lists.apple.com/mailman/listinfo/x1 1-users 

Mac OS X Hints: Unix 
www.macosxhints.com/index.php?topic=unix 

OSXFAQ Unix Tips 

www.osxfaq.com/tips/unix-tricks/ 


menu by choosing Applications: Customize. Click on 
Add Item, double-click in the Name field, and enter 
your program’s name. In the corresponding Com- 
mand field, enter your program’s path, which for pro- 
grams installed via FinkCommander will always be 
/swibin/filename. 

‘To determine the right file name to use, you may 
need to look in the bin folder inside the sw 
folder that Fink has created at the root level of 
your hard drive. The proper file will probably con- 
tain the name of the application, but installations 
sometimes create multiple similarly named files, so 
you may need to try a few of them before you get the 
right path. 


Time to Explore 

Once you’ve got FinkCommander up and running, 
you’re best off browsing and exploring the Unix 
wonders it has to offer. You may get frustrated at 
times, but you'll also find a wealth of software—much 
of which has been in development for many years— 
that you can finally run on your Mac. 


| JIM AKIN is a Minneapolis-based technology writer and a former MacUser senior editor. He has learned 


to stop worrying and love Terminal. 
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